Linux使用原始套接字从链路层开始封包组包（ARP请求与应答）

数组方式封包

#include <iostream>
#include <sys/socket.h>
#include <netinet/ether.h>
#include <arpa/inet.h>
#include <unistd.h>
#include <net/if.h>
#include <netpacket/packet.h>
#include <cstring>
#include <sys/ioctl.h>
#include <pthread.h>

/*
 * 使用原始套接字，从链路层开始组以太网帧数据进行发送
*/

using namespace std;
void *recv_from(void* arg)
{
    int sockfd = *(int*)arg;

    while(1)
    {
        unsigned char buf[1500] = "";
        recvfrom(sockfd,buf,sizeof(buf),0,NULL,NULL);
        //如果帧类型是ARP
        if(ntohs(*((unsigned short*)(buf+12))) == 0x0806)
        {
            //如果是ARP应答包
            if(ntohs(*(unsigned short*)(buf+20)) == 0x02)
            {
                unsigned char temp_ip[] = {192,168,243,1};
                //验证是否是想获取IP的RAP应答包
                if(memcmp((buf+28),temp_ip,4) == 0){
                    char dest_MAC[18] = "";
                    sprintf(dest_MAC,"%02x:%02x:%02x:%02x:%02x:%02x",buf[6],buf[7],buf[8],buf[9],buf[10],buf[11]);
                    char dest_IP[16] = "";
                    sprintf(dest_IP,"%d.%d.%d.%d",buf[28],buf[29],buf[30],buf[31]);
                    cout << dest_MAC << endl;
                    cout << dest_IP << endl;
                    break;
                }
            }
        }
    }
    return  NULL;
}

int main()
{
    int sockFd = socket(PF_PACKET,SOCK_RAW,htons(ETH_P_ALL));
    if(sockFd < 0)
    {
        perror("socket error");
        return  -1;
    }

    //要组的包
    unsigned char msg[] = {
        /*MAC报文头部*/
        0xff,0xff,0xff,0xff,0xff,0xff,//目标MAC地址
        0x00,0x0c,0x29,0xee,0x18,0x53,//源MAC地址
        0x08,0x06,//帧类型
        /*ARP报文头部*/
        0x00,0x01,//硬件类型，1代表以太网地址
        0x08,0x00,//0x0800为IP
        0x06,//硬件地址长度
        0x04,//协议地址长度
        0x00,0x01,//1：ARP请求；2：ARP应答；3：RARP请求；4：RARP应答
        0x00,0x0c,0x29,0xee,0x18,0x53,//源MAC地址
        192,168,243,128,//源IP地址
        0x00,0x00,0x00,0x00,0x00,0x00,//目标MAC地址
        192,168,243,1//目标IP地址
    };

    //设置网卡接口
    struct ifreq ethreq;
    strncpy(ethreq.ifr_ifrn.ifrn_name,"ens33",IFNAMSIZ);
    if(-1 == ioctl(sockFd,SIOCGIFINDEX,&ethreq))
    {
        perror("ioctl error");
        return  -2;
    }

    //设置帧数据从哪块网卡出去
    struct sockaddr_ll sll;
    bzero(&sll,sizeof(sll));
    sll.sll_ifindex = ethreq.ifr_ifru.ifru_ivalue;
    //接收ARP应答，如果放在发送下方，有可能会因为代码没有执行到下一行，ARP应答包就回来了，导致丢包
    //因为recvform会阻塞，所以这里要开启线程函数处理
    pthread_t tid;
    pthread_create(&tid,NULL,recv_from,(void*)&sockFd);
    //发送ARP请求
    sendto(sockFd,msg,sizeof(msg),0,(struct sockaddr*)&sll,sizeof(sll));
    pthread_join(tid,NULL);
    close(sockFd);
    return 0;
}

结构体方式封包

struct arphdr所在位置： /usr/include/net/if_arp.h #include <net/if_arp.h>

#include <iostream>
#include <net/if_arp.h>
#include <sys/socket.h>
#include <arpa/inet.h>
#include <sys/types.h>
#include <cstring>
#include <sys/ioctl.h>
#include <net/ethernet.h>
#include <net/if.h>
#include <netpacket/packet.h>
#include <unistd.h>
#include <pthread.h>

using namespace std;

void * recvThread(void * arg)
{
    int sockfd = *(int*)arg;
    while(true)
    {
        unsigned char buf[1500] = "";
        recvfrom(sockfd,buf,sizeof(buf),0,NULL,NULL);
        if(ntohs(*((unsigned short*)(buf+12))) == 0x0806)
        {
            if(ntohs(*(unsigned short*)(buf+20)) == 0x02)
            {
                unsigned char temp_ip[] = {192,168,243,1};
                if(memcmp((buf+28),temp_ip,4) == 0)
                {
                    char dest_MAC[18] = "";
                    sprintf(dest_MAC,"%02x:%02x:%02x:%02x:%02x:%02x",buf[6],buf[7],buf[8],buf[9],buf[10],buf[11]);
                    char dest_IP[16] = "";
                    sprintf(dest_IP,"%d.%d.%d.%d",buf[28],buf[29],buf[30],buf[31]);
                    cout << dest_MAC << endl;
                    cout << dest_IP << endl;
                    break;
                }
            }
        }
    }
    return NULL;
}

int main(int argc, char *argv[])
{
    int sockfd = socket(PF_PACKET,SOCK_RAW,htons(ETH_P_ALL));
    if(sockfd < 0)
    {
        perror("sockfd error");
        return -1;
    }

    struct ifreq ethreq;
    strncpy(ethreq.ifr_name,"ens33",IFNAMSIZ);
    if(ioctl(sockfd,SIOCGIFINDEX,&ethreq) == -1)
    {
        perror("ioctl error");
        close(sockfd);
        return -2;
    }

    struct sockaddr_ll sll;
    bzero(&sll,sizeof(sll));
    sll.sll_ifindex = ethreq.ifr_ifindex;

    unsigned char destMac[6] = {0xff,0xff,0xff,0xff,0xff,0xff};
    unsigned char srcMac[6] = {0x00,0x0c,0x29,0xee,0x18,0x53};
    unsigned char destIp[4] = {192,168,243,1};
    unsigned char srcIp[4] = {192,168,243,128};
    unsigned char msg[1024] = "";

    struct ether_header *macHeader = (struct ether_header*)msg;
    memcpy(macHeader->ether_dhost,destMac,sizeof(destMac));
    memcpy(macHeader->ether_shost,srcMac,sizeof(srcMac));
    macHeader->ether_type = htons(0x0806);

    struct arphdr *arpHeader = (struct arphdr*)(msg+14);
    arpHeader->ar_hrd = htons(1);
    arpHeader->ar_pro = htons(0x0800);
    arpHeader->ar_hln = 6;
    arpHeader->ar_pln = 4;
    arpHeader->ar_op = htons(1);
    memcpy(arpHeader->__ar_sha,srcMac,6);
    memcpy(arpHeader->__ar_sip,srcIp,4);
    memcpy(arpHeader->__ar_tha,destMac,6);
    memcpy(arpHeader->__ar_tip,destIp,4);

    pthread_t tid;
    pthread_create(&tid,NULL,recvThread,(void*)&sockfd);
    sendto(sockfd,msg,sizeof(msg),0,(struct sockaddr*)&sll,sizeof(sll));

    pthread_join(tid,NULL);
    close(sockfd);
    return 0;
}